> on your squid box, > pls add below rule. > > iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j > REDIRECT --to-port 3128 Where did you add below SNAT rule? On squid box or iptables box ? it should be added to iptables box. NOT to SQUID box. > in addition to that, Your squid box needs a SNAT rule , if it is > behind the SNATed networlk. Pls add it to iptables box. > rule like below. 1.2.3.4 is the external ip of iptables firewall box and ip address > 192.168.101.1 is the ip address of squid box. pls change it > accordingly > > iptables -t nat -A POSTROUTING -o eth0 -s 192.168.101.1 -j SNAT > --to-source 1.2.3.4 -- Thank you Indunil Jayasooriya